Personal data (hereinafter mostly referred to as “data”) is only processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter only referred to as “GDPR”), “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of processing. In addition, we inform you below about the external components used by us for optimization purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.
Our data protection declaration is structured as follows:
I. Information about us as the responsible party
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the responsible party
The responsible provider of this website in terms of data protection law is:
cathrin hoch interiors GmbH
Cathrin Hoch
Zillertalstraße 30 • in the WETSCHER furniture store
A-6263 Fügen in Zillertal
Telephone: +43 664 5402201
E-mail: cathrin@cathrinhoch.com
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation as to whether data concerning them is being processed, to information about the data processed, to further information about the data processing and to copies of the data (see also Art. 15 GDPR);
- to rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
- to the immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is necessary pursuant to Art. 17 para. 3 GDPR, to restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them that they have provided and to transmit this data to other providers/controllers (see also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out on the basis of Articles 16, 17 para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves disproportionate effort. Notwithstanding the foregoing, the user has a right to information about these recipients.
Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Art. 6 para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information is subsequently provided on individual processing procedures.
Cookies
a) Session cookies
We use so-called cookies with our website. Cookies are small text files or other storage technologies that are stored on your end device by the Internet browser you use. These cookies process certain information about you to an individual extent, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the display of our website in different languages or the offer of a shopping cart function.
The legal basis for this processing is Art. 6 para. 1 lit b.) GDPR, provided that these cookies process data for the initiation or execution of a contract.
If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para. 1 lit. f) GDPR.
These session cookies are deleted when you close your Internet browser.
b) Third-party cookies
If necessary, cookies from partner companies with whom we cooperate for the purpose of advertising, analysis or the functionalities of our website are also used with our website.
Please refer to the following information for details on this, in particular on the purposes and legal bases of the processing of such third-party cookies.
c) Removal option
You can prevent or restrict the installation of cookies by setting your Internet browser accordingly. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, the processing cannot be prevented via the settings of the browser. Instead, you must change the setting of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.
Contact requests / contact option
If you contact us via contact form or e-mail, the data you provide will be used to process your request. The provision of the data is necessary for processing and answering your request – without their provision we cannot answer your request or only to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.
Your data will be deleted if your request has been answered conclusively and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing.
We operate a company presence on the Facebook platform to advertise our products and services and to communicate with interested parties or customers.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The data protection officer of Facebook can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be accessed via the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting and subsequently reproduced processing of personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication and sale and promotion of our products and services.
The legal basis may also be the user’s consent pursuant to Art. 6 para. 1 lit. a GDPR to the platform operator. The user can revoke this consent at any time for the future by sending a message to the platform operator in accordance with Art. 7 para. 3 GDPR.
When our online presence is accessed on the Facebook platform, data of the user (e.g. personal information, IP address, etc.) is processed by Facebook Ireland Ltd. as the operator of the platform in the EU.
This data of the user serves for statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for creating profiles of users. Based on these profiles, Facebook Ireland Ltd. is able, for example, to advertise to users in and outside of Facebook in a way that is relevant to their interests. If the user is logged into his account on Facebook at the time of access, Facebook Ireland Ltd. can also link the data with the respective user account.
If the user makes contact via Facebook, the personal data of the user entered on this occasion will be used to process the request. The user’s data will be deleted by us if the user’s request has been answered conclusively and there are no statutory retention obligations, such as in the case of subsequent contract processing.
Cookies may also be set by Facebook Ireland Ltd. to process the data.
If the user does not agree with this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, the processing cannot be prevented via the settings of the browser, but by the corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all functions of Facebook can be used to their full extent.
Further details on the processing activities, their prevention and the deletion of the data processed by Facebook can be found in Facebook’s data policy:
https://www.facebook.com/privacy/explanation
It cannot be ruled out that the processing by Meta Platforms Ireland Limited may also take place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
We operate a company presence on the Instagram platform to advertise our products and services and to communicate with interested parties or customers.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The data protection officer of Instagram can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be accessed via the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting and subsequently reproduced processing of personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication and sale and promotion of our products and services.
The legal basis may also be the user’s consent pursuant to Art. 6 para. 1 lit. a GDPR to the platform operator. The user can revoke this consent at any time for the future by sending a message to the platform operator in accordance with Art. 7 para. 3 GDPR.
When our online presence is accessed on the Instagram platform, data of the user (e.g. personal information, IP address, etc.) is processed by Facebook Ireland Ltd. as the operator of the platform in the EU.
This data of the user serves for statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for creating profiles of users. Based on these profiles, Facebook Ireland Ltd. is able, for example, to advertise to users in and outside of Instagram in a way that is relevant to their interests. If the user is logged into his account on Instagram at the time of access, Facebook Ireland Ltd. can also link the data with the respective user account.
If the user makes contact via Instagram, the personal data of the user entered on this occasion will be used to process the request. The user’s data will be deleted by us if the user’s request has been answered conclusively and there are no statutory retention obligations, such as in the case of subsequent contract processing.
Cookies may also be set by Facebook Ireland Ltd. to process the data.
If the user does not agree with this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, the processing cannot be prevented via the settings of the browser, but by the corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all functions of Facebook can be used to their full extent.
Further details on the processing activities, their prevention and the deletion of the data processed by Instagram can be found in Instagram’s data policy:
https://help.instagram.com/519522125107875
It cannot be ruled out that the processing by Facebook Ireland Ltd. may also take place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
We maintain an online presence on Pinterest to present our company and our services and to communicate with customers/interested parties. Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.
In this respect, we would like to point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may result in increased risks for users, for example, as it may be more difficult to access user data at a later date. We also have no access to this user data. The possibility of access lies exclusively with Pinterest.
The data protection information of Pinterest can be found at
https://policy.pinterest.com/de/privacy-policy
We maintain an online presence on Twitter to present our company and our services and to communicate with customers/interested parties. Twitter is a service of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
In this respect, we would like to point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may result in increased risks for users, for example, as it may be more difficult to access user data at a later date. We also have no access to this user data. The possibility of access lies exclusively with Twitter.
The data protection information of Twitter can be found at
https://twitter.com/de/privacy
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Data protection declaration: https://www.facebook.com/policy.php
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Data protection declaration: https://help.instagram.com/519522125107875
Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.
Data protection declaration: https://policy.pinterest.com/de/privacy-policy
Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA
Data protection declaration: https://twitter.com/privacy
Google Analytics
We use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Through this function, Google shortens the IP address within the EU or the EEA.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and the usage activities there. This data can also be used to provide further services related to the use of our website and the use of the Internet.
Google states that it does not link your IP address to other data. In addition, Google complies with
https://www.google.com/intl/de/policies/privacy/partners
further data protection information for you, such as the options for preventing data use.
Google also offers under
https://tools.google.com/dlpage/gaoptout?hl=de
a so-called deactivation add-on along with further information on this. This add-on can be installed with common Internet browsers and offers you further control over the data that Google collects when you access our website. The add-on tells the JavaScript (ga.js) from Google Analytics that information about visits to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or other web analysis services. You can of course also find out whether and which other web analysis services are used by us in this data protection declaration.
CloudFlare
To secure our website and to optimize loading times, we use the CloudFlare service as a so-called CDN (Content Delivery Network). This is a service of Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107, USA, hereinafter referred to as “CloudFlare”.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the secure operation of our website and in its optimization.
If you access our website, your requests will be routed through the CloudFlare server. Statistical access data about visits to our website are collected and a cookie is stored on your end device via your Internet browser by CloudFlare. The access data includes
– Your IP address,
– the website(s) of our website that you have accessed,
– Type and version of the Internet browser you are using,
– the operating system you are using,
– the website from which you switched to our website (referrer URL),
– Your length of stay on our website and
– the frequency with which our websites are accessed.
The data is used by CloudFlare for the purpose of statistical evaluations of access as well as for the security and optimization of the offer.
If you do not agree with this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. You can find details on this above under the point “Cookies”.
CloudFlare offers under
https://www.cloudflare.com/privacypolicy/
further information on the collection and use of data as well as on your rights and options to protect your privacy.
Google Fonts
We use Google Fonts on our website to display external fonts. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when you access our website.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
Through the connection to Google established when you access our website, Google can determine from which website your request was sent and to which IP address the display of the font is to be transmitted.
Google offers under
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information, in particular on the options for preventing data use.
Google reCAPTCHA
We use Google reCAPTCHA on our website to check and prevent interactions on our website through automated access, e.g. by so-called bots. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
Through this service, Google can determine from which website a request is sent and from which IP address you are using the so-called reCAPTCHA input box. In addition to your IP address, Google may collect other information that is necessary for the offer and guarantee of this service.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the defense against unwanted, automated access in the form of spam or similar.
Google offers under
https://policies.google.com/privacy
further information on the general handling of your user data.
Google Maps
We use Google Maps on our website to display our location and to create directions. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when you access our website.
If you access the Google Maps component integrated into our website, Google stores a cookie on your end device via your Internet browser. In order to display our location and create directions, your user settings and data are processed. We cannot rule out that Google uses servers in the USA.
In the event of your consent for this processing, the legal basis is Art. 6 Para. 1 lit. a GDPR. The legal basis can also be Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in optimizing the functionality of our website.
Through the connection to Google established in this way, Google can determine from which website your request was sent and to which IP address the directions are to be transmitted.
If you do not agree with this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. You can find details on this above under the point “Cookies”.
In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.
Google also offers under
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information.
YouTube
We use YouTube on our website. This is a video portal of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “YouTube”.
We use YouTube in connection with the “Extended data protection mode” function to show you videos. In the event of your consent for this processing, the legal basis is Art. 6 Para. 1 lit. a GDPR. The legal basis can also be Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “Extended data protection mode” function means that the data described in more detail below is only transmitted to the YouTube server if you actually start a video.
Without this “Extended data protection”, a connection to the YouTube server in the USA is established as soon as you access one of our websites on which a YouTube video is embedded.
This connection is required to display the respective video on our website via your Internet browser. In the course of this, YouTube will at least record and process your IP address, the date and time and the website you visited. In addition, a connection to the advertising network “DoubleClick” from Google is established.
If you are logged into YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and to analyze user behavior, YouTube permanently stores cookies on your end device via your Internet browser. If you do not agree with this processing, you have the option of preventing the storage of cookies by setting your Internet browser. You can find more information on this above under “Cookies”.
Further information about the collection and use of data as well as your rights and protection options in this regard is available from Google in the
https://policies.google.com/privacy
data protection information available.
Sample data protection declaration from the law firm Weiß & Partner